karnel-termux 4.13.3 → 4.13.5

package/README.md

@@ -8,7 +8,7 @@
 
 <p align="center">
   <a href="https://github.com/israelmarques1024-dotcom/karnel-termux">
-    <img src="https://img.shields.io/badge/version-4.13.3-0078D4?style=for-the-badge" alt="Version">
+    <img src="https://img.shields.io/badge/version-4.13.5-0078D4?style=for-the-badge" alt="Version">
   </a>
   <a href="https://www.npmjs.com/package/karnel-termux">
     <img src="https://img.shields.io/npm/v/karnel-termux?style=for-the-badge&logo=npm&color=cb3837" alt="npm">
@@ -473,6 +473,7 @@ Documentation loads from https://karneltermux.vercel.app.
 - [Documentation index](docs/README.md)
 - [CLI reference](docs/cli/README.md)
 - [Doctor reference](docs/doctor/README.md)
+- [Troubleshooting](docs/troubleshooting.md)
 - [Architecture](docs/ARCHITECTURE.md)
 - [Documentation changelog](docs/CHANGELOG.md)
 - [Official website](https://karneltermux.vercel.app)
@@ -570,9 +571,11 @@ karnel update karnel     # Update the framework
 
 `karnel update` requires a target such as `karnel`, `ai`, or `security`.
 `karnel update karnel` first runs the official curl installer, then falls back to
-the local Git checkout and package-manager installs if needed. The framework
-checks for a new version in the background at most once every 24 hours; the check
-can use npm or GitHub and writes state under `$KARNEL_CACHE`.
+the local Git checkout and package-manager installs if needed. The curl installer
+is pinned to the latest GitHub release tag, and its SHA-256 checksum is verified
+before it runs. The framework checks for a new version in the background at most
+once every 24 hours; the check can use npm or GitHub and writes state under
+`$KARNEL_CACHE`.
 
 ---
 

package/karnel/cli/commands/list.sh

@@ -188,8 +188,8 @@ _list_ai() {
   table_row "Kimi Code" "--kimi-code" "kimi" "$(_check_cmd "kimi")"
   table_row "Command Code" "--command-code" "command-code" "$(_check_cmd "command-code")"
   table_row "Freebuff" "--freebuff" "freebuff" "$(_check_cmd "freebuff")"
-  table_row "Kilo Code CLI" "--kilocode-cli" "kilocode" "$(_check_cmd "kilocode")"
-  table_row "Kiro CLI" "--kiro" "kiro" "$(_check_cmd "kiro")"
+  table_row "Kilo Code CLI" "--kilocode-cli" "kilocode,kilo" "$(_check_cmd_any "kilocode,kilo")"
+  table_row "Kiro CLI" "--kiro" "kiro,kiro-cli" "$(_check_cmd_any "kiro,kiro-cli")"
   table_row "Crush CLI" "--crush" "crush" "$(_check_cmd "crush")"
   table_row "Cline CLI" "--cline" "cline" "$(_check_cmd "cline")"
   table_row "Odysseus" "--odysseus" "odysseus" "$(_check_cmd "odysseus")"
@@ -199,7 +199,7 @@ _list_ai() {
   table_row "OpenSpec SDD" "--openspec" "openspec" "$(_check_cmd "openspec")"
   table_row "Qoder" "--qoder" "qodercli" "$(_check_cmd "qodercli")"
   table_row "AMP Code CLI" "--ampcode" "amp" "$(_check_cmd "amp")"
-  table_row "Cursor CLI" "--cursor-cli" "cursor" "$(_check_cmd "cursor")"
+  table_row "Cursor CLI" "--cursor-cli" "cursor,cursor-agent" "$(_check_cmd_any "cursor,cursor-agent")"
   table_row "Oh-My-Pi" "--oh-my-pi" "omp" "$(_check_cmd "omp")"
   table_row "Goose CLI" "--goose" "goose" "$(_check_cmd "goose")"
   table_row "Factory Droid" "--droid" "droid" "$(_check_cmd "droid")"
@@ -467,6 +467,20 @@ _check_cmd() {
   fi
 }
 
+# Check if any of the comma-separated commands exists
+_check_cmd_any() {
+  local bin_list="$1"
+  local bin
+  IFS=',' read -ra bins <<< "$bin_list"
+  for bin in "${bins[@]}"; do
+    if command -v "$bin" &>/dev/null; then
+      echo -e "${D_GREEN}installed${NC}"
+      return 0
+    fi
+  done
+  echo -e "${D_RED}not installed${NC}"
+}
+
 # Check if package is installed via pkg
 _check_pkg() {
   local pkg="$1"

package/karnel/cli/commands/update.sh

@@ -212,20 +212,48 @@ _update_cleanup() {
 _update_try_curl() {
   command -v curl &>/dev/null || return 1
 
-  local installer
-  installer=$(mktemp "${TMPDIR:-/tmp}/karnel-install.XXXXXX") || return 1
+  local meta installer sumfile tag
+  meta=$(mktemp "${TMPDIR:-/tmp}/karnel-meta.XXXXXX") || return 1
+  installer=$(mktemp "${TMPDIR:-/tmp}/karnel-install.XXXXXX") || { rm -f "$meta"; return 1; }
+  sumfile=$(mktemp "${TMPDIR:-/tmp}/karnel-sum.XXXXXX") || { rm -f "$meta" "$installer"; return 1; }
 
   log_info "Trying the official curl installer..."
+
   if ! curl --fail --silent --show-error --location \
-    "https://raw.githubusercontent.com/israelmarques1024-dotcom/karnel-termux/main/install.sh" \
+    "https://api.github.com/repos/israelmarques1024-dotcom/karnel-termux/releases/latest" \
+    -o "$meta"; then
+    rm -f "$meta" "$installer" "$sumfile"
+    return 1
+  fi
+
+  tag=$(_update_latest_release_tag "$meta")
+  if [[ -z "$tag" || ! "$tag" =~ ^v[0-9]+\.[0-9]+\.[0-9]+$ ]]; then
+    log_error "GitHub returned an invalid release tag: ${tag:-none}"
+    rm -f "$meta" "$installer" "$sumfile"
+    return 1
+  fi
+
+  if ! curl --fail --silent --show-error --location \
+    "https://github.com/israelmarques1024-dotcom/karnel-termux/releases/download/$tag/karnel-termux-install.sh.sha256" \
+    -o "$sumfile" ||
+    ! curl --fail --silent --show-error --location \
+    "https://github.com/israelmarques1024-dotcom/karnel-termux/releases/download/$tag/karnel-termux-install.sh" \
     -o "$installer"; then
-    rm -f "$installer"
+    rm -f "$meta" "$installer" "$sumfile"
+    return 1
+  fi
+
+  if ! _verify_sha256 "$installer" "$sumfile"; then
+    log_error "Checksum verification failed for the curl installer"
+    rm -f "$meta" "$installer" "$sumfile"
     return 1
   fi
 
+  rm -f "$meta" "$sumfile"
+
   if bash "$installer"; then
     rm -f "$installer"
-    log_success "Karnel-Termux updated via curl"
+    log_success "Karnel-Termux updated via curl (v$tag)"
     return 0
   fi
 
@@ -234,6 +262,41 @@ _update_try_curl() {
   return 1
 }
 
+_update_latest_release_tag() {
+  local meta="$1"
+  if command -v node &>/dev/null; then
+    node -e '
+      let s = "";
+      process.stdin.resume();
+      process.stdin.on("data", (d) => { s += d; });
+      process.stdin.on("end", () => {
+        try { process.stdout.write(JSON.parse(s).tag_name || ""); } catch (e) {}
+      });
+    ' < "$meta"
+    return
+  fi
+  grep -oP '"tag_name":\s*"\K[^"]+' "$meta" 2>/dev/null | head -n 1
+}
+
+_verify_sha256() {
+  local file="$1" sumfile="$2"
+  local expected actual
+  expected=$(awk 'NR == 1 { print $1 }' "$sumfile")
+  [[ -n "$expected" ]] || return 1
+  if command -v sha256sum &>/dev/null; then
+    actual=$(sha256sum "$file" | awk '{ print $1 }')
+  elif command -v node &>/dev/null; then
+    actual=$(node -e '
+      const fs = require("fs");
+      const crypto = require("crypto");
+      process.stdout.write(crypto.createHash("sha256").update(fs.readFileSync(process.argv[1])).digest("hex"));
+    ' "$file")
+  else
+    return 1
+  fi
+  [[ "$actual" == "$expected" ]]
+}
+
 _update_try_git() {
   [[ -d "$KARNEL_PATH/../.git" ]] || return 1
   loading "Updating via git" _update_karnel_repo

package/karnel/tools/ai/freebuff/install.sh

@@ -29,7 +29,7 @@ _freebuff_proot_ubuntu() {
 
 _get_latest_freebuff_version() {
   curl -fsSL https://api.github.com/repos/CodebuffAI/codebuff-community/releases/latest |
-    grep '"tag_name":' | sed -E 's/.*"freebuff-v([^"]+)".*/\1/'
+    grep '"tag_name":' | sed -E 's/.*"tag_name":\s*"v([0-9]+\.[0-9]+\.[0-9]+)".*/\1/'
 }
 
 _freebuff_install_deps_native() {
@@ -86,8 +86,8 @@ _download_freebuff_binary_impl() {
 
   mkdir -p "$FREEBUFF_DATA_DIR"
 
-  local tarball="freebuff-linux-arm64.tar.gz"
-  local download_url="https://codebuff.com/api/releases/download/$latest_version/$tarball"
+  local tarball="codebuff-linux-arm64.tar.gz"
+  local download_url="https://github.com/CodebuffAI/codebuff-community/releases/download/v${latest_version}/${tarball}"
 
   if ! curl -fsSL "$download_url" -o "$FREEBUFF_DATA_DIR/$tarball" &>>"$LOG_FILE"; then
     log_error "Failed to download Freebuff binary"
@@ -101,11 +101,12 @@ _download_freebuff_binary_impl() {
 
   rm -f "$FREEBUFF_DATA_DIR/$tarball"
 
-  if [ ! -f "$FREEBUFF_DATA_DIR/freebuff" ]; then
+  if [ ! -f "$FREEBUFF_DATA_DIR/codebuff" ]; then
     log_error "Freebuff binary not found after extraction"
     return 1
   fi
 
+  mv -f "$FREEBUFF_DATA_DIR/codebuff" "$FREEBUFF_DATA_DIR/freebuff"
   chmod +x "$FREEBUFF_DATA_DIR/freebuff"
   return 0
 }
@@ -161,11 +162,12 @@ _install_freebuff_proot_impl() {
     export SHELL=/bin/bash
     export TMPDIR=/tmp
     export HOME=/root
-    LATEST=$(curl -fsSL https://api.github.com/repos/CodebuffAI/codebuff-community/releases/latest | grep '"'"'tag_name'"'"' | sed -E '"'"'s/.*"freebuff-v([^"]+)".*/\1/'"'"')
+    LATEST=$(curl -fsSL https://api.github.com/repos/CodebuffAI/codebuff-community/releases/latest | grep '"'"'tag_name'"'"' | sed -E '"'"'s/.*"tag_name":\s*"v([0-9]+\.[0-9]+\.[0-9]+)".*/\1/'"'"')
     TARBALL=$(mktemp /tmp/freebuff.XXXXXX.tar.gz)
-    curl -fsSL "https://codebuff.com/api/releases/download/${LATEST}/freebuff-linux-arm64.tar.gz" -o "$TARBALL"
+    curl -fsSL "https://github.com/CodebuffAI/codebuff-community/releases/download/v${LATEST}/codebuff-linux-arm64.tar.gz" -o "$TARBALL"
     mkdir -p /root/.freebuff
     tar -zxf "$TARBALL" -C /root/.freebuff
+    mv -f /root/.freebuff/codebuff /root/.freebuff/freebuff
     rm -f "$TARBALL"
     chmod +x /root/.freebuff/freebuff
   ' &>>"$LOG_FILE"
@@ -277,11 +279,12 @@ _update_freebuff_impl() {
     export SHELL=/bin/bash
     export TMPDIR=/tmp
     export HOME=/root
-    LATEST=$(curl -fsSL https://api.github.com/repos/CodebuffAI/codebuff-community/releases/latest | grep '"'"'tag_name'"'"' | sed -E '"'"'s/.*"freebuff-v([^"]+)".*/\1/'"'"')
+    LATEST=$(curl -fsSL https://api.github.com/repos/CodebuffAI/codebuff-community/releases/latest | grep '"'"'tag_name'"'"' | sed -E '"'"'s/.*"tag_name":\s*"v([0-9]+\.[0-9]+\.[0-9]+)".*/\1/'"'"')
     TARBALL=$(mktemp /tmp/freebuff.XXXXXX.tar.gz)
-    curl -fsSL "https://codebuff.com/api/releases/download/${LATEST}/freebuff-linux-arm64.tar.gz" -o "$TARBALL"
+    curl -fsSL "https://github.com/CodebuffAI/codebuff-community/releases/download/v${LATEST}/codebuff-linux-arm64.tar.gz" -o "$TARBALL"
     mkdir -p /root/.freebuff
     tar -zxf "$TARBALL" -C /root/.freebuff
+    mv -f /root/.freebuff/codebuff /root/.freebuff/freebuff
     rm -f "$TARBALL"
     chmod +x /root/.freebuff/freebuff
   ' &>>"$LOG_FILE"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "karnel-termux",
-  "version": "4.13.3",
+  "version": "4.13.5",
   "description": "Modular Dev Environment for Termux — install languages, databases, AI agents, editors, and more with one command",
   "bin": {
     "karnel": "karnel/bin/karnel"